The Pentagon is treating the military commissary refrigeration cyberattack probe as a possible cyberattack after August freezer failures hit more than a half-dozen commissaries. The outages reached seven military locations across several states. That puts food storage, not just equipment, at the center of a criminal investigation.
Pentagon and the seven commissaries
Four officials told this week that the Pentagon is looking at the August failures as a possible cyberattack. The Defense Criminal Investigative Service is leading a joint investigation. Fort Irwin, California; Holloman Air Force Base, New Mexico; Naval Station Newport, Rhode Island; Little Rock Air Force Base, Arkansas; F.E. Warren Air Force Base, Wyoming; Robins Air Force Base, Georgia; and Fort Huachuca, Arizona were among the affected commissaries.
Christopher Whyte, an associate professor of homeland security and emergency preparedness at Virginia Commonwealth University, said, “You’d be silly not to be suspicious.” He also said, “Refrigerators give an attacker a weirdly direct route…to financial loss that’s, with cyber, unusually irreversible,” because spoiled stock cannot be recovered once the temperature climbs.
France and the freezer comparison
The comparison point is refrigeration outages at French supermarkets earlier this month. Hackers raised temperatures in refrigeration and freezer systems to more than 122 degrees Fahrenheit. The affected stores included 80 Carrefour locations, about two-dozen Monoprix stores, and 150 Intermarché stores.
The Paris prosecutor’s office called the French outages a large-scale attack. Two supermarkets, Intermarché and E.Leclerc, reported an estimated €270,000 in combined stock damages. Whyte said, “You can’t unspoil food or other products from these freezers. It’s just Euros and dollars down the drain.”
What the probe changes
The Pentagon said, “For security reasons, we do not comment on ongoing law enforcement investigations.” That leaves the public with a live criminal probe and no public determination that the commissary failures were a hack at all. The immediate practical issue for affected commissaries is whether the losses came from a cyber incident or from a non-cyber equipment failure, because the answer determines how the case is handled and what investigators must prove.
For readers shopping at commissaries, the key point is narrower than the headlines suggest. The outage list is specific. The allegation is not yet a finding. The probe is moving through the Defense Criminal Investigative Service, and the French cases give investigators a recent pattern to compare against, but the U.S. cause has not been publicly pinned down.
